Security Directory

P

Pilgerzentrum St. Jakob Zürich

jakobspilger.ch

49

Pilgerzentrum St. Jakob Zürich is a small non-profit organization affiliated with the reformierte Kirche Zürich, focused on offering spiritual pilgrimage experiences, thematic pilgrimages, community events, and educational programs. Their website provides detailed event listings, newsletter signups, and community engagement features targeting pilgrims and spiritually interested individuals primarily in Switzerland. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics and Tag Manager for tracking, and is built on the Redaxo CMS platform. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though it lacks advanced security headers and explicit security policies. Privacy and cookie policies are present and GDPR compliant. WHOIS data confirms the domain is registered consistently with the organization's identity, enhancing trust. Overall, the site is professional, trustworthy, and well-suited for its community-focused mission.

M

Mosaic Church und Fachstelle Zürich

mosaic-zuerich.ch

69

Mosaic Church und Fachstelle Zürich is a small non-profit religious organization affiliated with the reformierte Kirche Zürich, focusing on providing a welcoming church community and educational resources for LGBTIQ+ individuals. Their services include church gatherings, theological education, and community support. The website is built on Squarespace, featuring a modern and responsive design with good SEO and accessibility basics. Security posture is strong with HTTPS and HSTS enabled, complemented by a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is trustworthy, professional, and well-aligned with its mission.

Z

Zytlos

zyt-los.com

46

Zytlos is a small non-profit community organization affiliated with the reformed church of Zurich, providing a welcoming space near Bahnhof Enge that includes a café and diverse event offerings such as concerts, coworking, meditation, and yoga. The website is professionally designed using WordPress and Elementor, featuring modern web technologies and responsive design. Security posture is adequate with HTTPS and reCAPTCHA integration, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and serves its community-focused mission effectively.

K

Kirchgemeinde Zürich

kirche-zh.ch

50

The kirche-zh.ch website functions as a portal for the Kirchgemeinde Zürich, serving as a gateway to various church communities in Zurich. It provides basic information and links to affiliated church websites, targeting local residents and church members. The site is modest in content and design, reflecting its non-profit and community-oriented nature. Technically, the site uses a variety of JavaScript libraries including jQuery, Bootstrap, and Piwik/Matomo for analytics, but lacks modern CMS identification and advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no forms or user input mechanisms are present. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is functional but could benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and engagement.

E

Evangelisch-reformierte Kirchgemeinde Zürich

darum-kirche.ch

52

The website darum-kirche.ch represents the Evangelisch-reformierte Kirchgemeinde Zürich, a medium-sized non-profit religious organization serving the city of Zurich. It offers a broad range of spiritual, social, and cultural services aimed at fostering community, hope, and reconciliation. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, ensuring good SEO and privacy-conscious analytics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness. Overall, the website effectively communicates its mission and services to its target audience while maintaining good technical and security standards.

IT-Atelier is a small German engineering office specializing in media and information technology, offering IT coordination, management consulting, web-based software applications, and internet services primarily targeting businesses and public sector organizations such as municipalities. The company has over two decades of experience since its founding in 2003 and operates with a local/regional focus in Leipzig, Germany. The website content is basic but relevant, providing clear contact information and a concise description of services. Technically, the site uses legacy technologies such as jQuery 1.4.4 and basic CSS styling with some mobile optimization. There is no evidence of modern CMS or advanced frameworks. Security posture is moderate but limited by the use of outdated libraries and lack of visible security headers or HTTPS status information. No privacy or cookie policies are published, indicating compliance gaps. Overall, the domain registration data is consistent with the business claims, supporting legitimacy.

B

Bayerische Botanische Gesellschaft e.V.

bbgev.de

57

The Bayerische Botanische Gesellschaft e.V. is a long-established non-profit botanical society based in Munich, Germany, founded in 1890. The organization focuses on the scientific study and conservation of Bavaria's native flora, offering members educational programs, excursions, and publications. The website serves as an informational portal for members and interested parties, highlighting the society's history, activities, and protected areas it manages. Technically, the site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the site is functional and professionally presented, mobile optimization and accessibility are basic, and there is room for improvement in SEO and privacy compliance. Security posture is adequate with HTTPS and standard headers, but lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and suitable for its audience but could benefit from enhanced privacy and security features.

M

MVB GmbH

vlb.de

46

MVB GmbH operates the VLB (Verzeichnis Lieferbarer Bücher), a central platform for automated exchange of product information in the German-speaking book industry. The website serves key stakeholders including bookstores, publishers, self-publishers, and service providers, offering services such as order clearing (IBU), reference databases, and subscription discounts. The platform holds a strong market position as an authoritative source in its sector. Technically, the website employs modern web technologies including Bootstrap, Owl Carousel, and Google Tag Manager, hosted on Anexia infrastructure. It features responsive design, good SEO, and accessibility standards, with a cookie consent mechanism ensuring privacy compliance. The site is well-structured and professionally designed, providing a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR. The WHOIS data aligns with the business entity, reinforcing legitimacy. Strategic improvements in security transparency and incident response readiness would further strengthen the platform's reliability.

ISNI International Agency (ISNI-IA) operates the ISO certified global standard for uniquely identifying contributors to creative works, serving a critical role in the media and creative industries. The organization maintains a large database of over 16 million identities, including individuals and organizations, facilitating accurate attribution and interoperability across multiple domains. Their business model centers on providing persistent identifiers to resolve name ambiguity and support linked data applications, positioning ISNI as a global authority in this niche. The website reflects a professional and consistent brand presence, targeting researchers, creators, publishers, and distributors worldwide.

M

MVB GmbH

mvb-online.com

65

MVB GmbH operates as a central technology and information provider in the book industry, offering digital platforms and media formats to publishers, booksellers, self-publishers, and service providers primarily in Germany and internationally. The company has a strong market position as a connector within the book industry, supported by a professional and content-rich website that reflects its business focus and international presence. Technically, the website employs modern web technologies including FontAwesome, Google Tag Manager, and a cookie consent management system, hosted on Anexia infrastructure. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and established entity.

P

Preiss Werbe- und Internetagentur

contao-themes-shop.de

44

The website www.contao-themes-shop.de represents Preiss Werbe- und Internetagentur, a small German company specializing in providing professional Contao CMS themes, templates, and extensions. Their business model focuses on e-commerce sales of digital products tailored for Contao CMS users, alongside offering custom theme development and support services primarily targeting agencies and businesses seeking customizable web solutions. The site is well-structured, with clear navigation and comprehensive legal and privacy documentation, reflecting a professional and trustworthy online presence. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery, AOS, and mmenu for enhanced user experience and mobile responsiveness. Hosting is provided via kasserver.com, consistent with the domain's nameservers. Performance is moderate with good mobile optimization and basic accessibility features. The site employs secure form handling with CSRF tokens but lacks explicit HTTP security headers. From a security perspective, the site uses HTTPS and secure form tokens, indicating a baseline security posture. However, the absence of security headers and a formal security policy or incident response contact reduces the overall security maturity. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism is detected. Business credibility is high due to clear contact information, official Contao partner certifications, and consistent branding. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance the security posture and compliance further.

Heitech Service GmbH is a small German web agency specializing in web design, hosting, and consulting services primarily for regional clients. Their website is professionally designed using the Contao CMS and offers hosting under the Lausitz-Hosting brand. The technical infrastructure includes modern JavaScript libraries and a cookie consent mechanism, indicating GDPR awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response information. Overall, the website is functional and trustworthy in appearance but requires verification of domain registration and enhanced security practices.

H

Human Rockstars

human-rockstars.com

47

Human Rockstars is a small coaching business based in Germany, specializing in systemic coaching, microdosing, and psychedelic integration. The website presents a professional and consistent brand with a strong focus on personal development and educational content, including a podcast featuring expert guests. The business targets individuals interested in microdosing and psychedelic experiences, offering personal and group coaching programs. Technically, the site is built on WordPress using Elementor and several plugins for SEO, cookie management, and podcasting. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant. No direct contact emails or phone numbers are publicly listed, with contact primarily via a secured form. The domain registration is consistent with the business age and claims, enhancing trustworthiness.

N

National Geographic Partners, LLC

nationalgeographic.com

65

National Geographic Partners, LLC operates the National Geographic website, a globally recognized media organization specializing in science, exploration, geography, and environmental journalism. The website serves a broad audience interested in educational and documentary content, supported by flagship publications and television programming. Owned by The Walt Disney Company, it maintains a strong market position with consistent branding and high-quality content. Technically, the website employs modern web technologies including React and integrates advanced monitoring and consent management tools such as New Relic and OneTrust. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities, although explicit vulnerability disclosure and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with excellent content quality and user experience, suitable for a large enterprise media entity.

N

National Geographic España

nationalgeographic.es

55

National Geographic España operates as a prominent media brand delivering high-quality content focused on science, nature, history, and travel. The website serves a broad general audience with a mix of free and subscription-based content, supported by advertising partnerships and e-commerce through affiliated domains. The brand is well-established in Spain, leveraging multimedia content and digital subscriptions to maintain market relevance. Technically, the website employs a modern tech stack including advanced advertising technologies, consent management via Didomi, and multimedia delivery through JWPlayer. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a mature digital infrastructure. However, some areas such as explicit privacy policy publication and accessibility could be improved. Security posture is solid with HTTPS enforcement and consent mechanisms, but lacks visible vulnerability disclosure or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website's professional presentation and branding strongly indicate legitimacy. Overall, the site presents a low-risk profile with good content quality and technical implementation, but should enhance transparency around privacy, contact information, and security disclosures to strengthen trust and compliance.

I

INL – Privates Institut für Nachhaltige Landbewirtschaftung GmbH

nachhaltige-landbewirtschaftung.de

39

INL – Privates Institut für Nachhaltige Landbewirtschaftung GmbH is a specialized institute focused on measuring ecological sustainability in agriculture. With over 16 years of experience, the company offers consulting, certification, monitoring, and scientific services primarily targeting agricultural businesses, retailers, and environmental stakeholders in Germany. The website reflects a niche market position with a professional presentation and clear service offerings. Technically, the website is built on WordPress 6.8.2 with a modern plugin ecosystem including OpenLayers for mapping and WP Statistics for analytics. Hosting is provided by Cloudpit, and the site uses HTTPS with good SSL configuration. Mobile optimization and SEO are well addressed, though accessibility is basic. No major technical issues or vulnerabilities were detected in the visible content. From a security perspective, the site uses HTTPS and some security best practices but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is supported by a privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the site presents a low risk profile with a good balance of content quality, technical implementation, and business credibility. Strategic improvements could focus on enhancing security headers, publishing incident response information, and adding direct contact details for security and data protection officers.

The Netzwerk Agrartechnik Sachsen website represents a regional competence network focused on agritech innovation and collaboration between Saxon companies and research institutions. The network aims to strengthen the competitiveness of the agricultural technology sector through knowledge transfer, workshops, and innovation forums. The website is built on WordPress with moderate technical sophistication, including SEO optimization and basic mobile responsiveness. Security posture is moderate with some gaps such as lack of DNSSEC and outdated JavaScript libraries. Privacy compliance is basic with a cookie consent banner but a minimal privacy policy lacking explicit GDPR statements. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve security and compliance aspects.

B

BOSS TONE EXCHANGE

bosstoneexchange.com

56

BOSS TONE EXCHANGE is a specialized online platform launched in 2022 that enables users of BOSS musical products to share original Livesets globally. The platform targets musicians and music producers who use BOSS gear, providing a community-driven service focused on content sharing. The website is professionally designed with good SEO and mobile optimization, leveraging modern web technologies and third-party services such as Google Analytics and OneTrust for cookie consent management. Hosting appears to be on AWS infrastructure, ensuring reliable performance. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, DNSSEC is not enabled and security headers are missing, representing areas for improvement. No direct contact information or detailed security policies are published, which could impact user trust. Overall, the domain registration is consistent and legitimate, supporting the platform's credibility. The site contains no adult or questionable content and maintains a safe environment for general audiences.

K

Krüger + Co. AG

krueger.ch

58

Krüger + Co. AG is a Swiss medium-sized company specializing in heating, cooling, humidification, dehumidification, and water damage drying solutions, serving both industrial and residential markets across 21 locations. The company offers a broad range of products and services including emergency heating, climate systems, and consulting, positioning itself as a reliable regional player in the energy sector. Technically, the website is built on WordPress with WooCommerce, enhanced by modern plugins for SEO, multilingual support, and GDPR compliance. Analytics tools like Microsoft Clarity, Google Tag Manager, and Hotjar are used for user behavior insights. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, with transparent contact information and compliance with privacy regulations.

F

FORS AG

fors.ch

68

FORS AG is a Swiss-based company specializing in the retail and professional supply of household and commercial appliances, with over 40 years of market presence. The website showcases a broad product range including cooling, cooking, washing, and professional equipment, supported by warranty and service offerings. The company targets both private consumers and professional clients, positioning itself as a trusted specialist in its sector. Technically, the website is built on WordPress with WooCommerce, leveraging modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and multiple tracking pixels. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility could be enhanced. Security posture is strong with HTTPS and security headers implemented, but lacks explicit privacy and cookie policies, which impacts compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Schulthess Maschinen AG

schulthess.ch

59

Schulthess Maschinen AG is a well-established Swiss manufacturer and retailer specializing in washing machines, dryers, and dishwashers. The company emphasizes innovation rooted in tradition, targeting both homecare and professional customers primarily in Switzerland and German-speaking regions. Their business model combines product sales, service contracts, and an online shop for wash cards, positioning them as a trusted brand in the household appliance sector. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement tools. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, secure, and compliant, supporting the company's market position effectively.

A

ANSARO

ansaro.ch

62

ANSARO is a Swiss-based coffee roastery specializing in freshly roasted coffee beans and retailing coffee products. The company positions itself as a local Swiss quality brand with a focus on authentic taste and craftsmanship. The website is professionally designed using the Wix platform, indicating a moderate level of digital maturity suitable for a small retail business. The technical infrastructure leverages Wix's Thunderbolt framework, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security features to meet compliance standards. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and improving accessibility.

S

Swiss Olympic

coolandclean.ch

64

The website coolandclean.ch represents a national youth sports prevention program operated under the auspices of Swiss Olympic. It focuses on promoting healthy behaviors, fair play, and substance abuse prevention among young athletes and their leaders. The platform offers educational content, training tips, a material shop, and community support including regional ambassadors and consultation services. The site is well-branded, professionally designed, and targets youth sports organizations and their stakeholders in Switzerland. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Google Maps API, likely built on a CMS such as Adobe Experience Manager. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not visible. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

S

Swiss Olympic Association

swissolympicteam.ch

62

Swiss Olympic Association is the official national Olympic organization representing Swiss athletes and promoting Olympic values such as Excellence, Respect, and Friendship. The website highlights their involvement in Olympic missions, including the upcoming Milano Cortina 2026 Winter Games, and showcases athlete stories and official partners. The organization operates as a non-profit entity focused on supporting athletes and the Olympic movement within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, JWPlayer, and Slick Carousel. The site appears to be built on a CMS platform with structured content and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, security headers are not explicitly detected and incident response contact details are absent, which could be improved. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. It provides clear contact information, partner listings, and social media integration, supporting a positive user experience and business credibility.

N

natelo

natelo.ch

64

natelo is a Swiss-based retail and e-commerce company specializing in mobile subscriptions, smartphones, buyback, repairs, and accessories. The company operates both online and through four physical locations, targeting Swiss consumers seeking mobile technology products and services. The website presents a professional and consistent brand image with a clear focus on the Swiss market. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for SEO and payment processing. It employs HTTPS and security best practices such as Google reCAPTCHA and cookie consent management, indicating a mature digital infrastructure. However, the absence of a dedicated privacy policy and terms of service pages represents a compliance gap. Security posture is strong with appropriate headers and no visible vulnerabilities, but incident response and security policy documentation are lacking. Overall, natelo demonstrates a solid market presence with good technical and security foundations but should enhance privacy compliance and transparency to improve trust and regulatory adherence.

SWISS is a major international airline operating under the Lufthansa Group, providing comprehensive flight booking and travel services globally. The website is professionally designed, mobile-optimized, and offers a rich user experience with clear navigation and extensive travel-related content. Technically, the site leverages modern JavaScript frameworks, Adobe Helix RUM for performance monitoring, and Tealium for tag management, hosted on Akamai CDN ensuring fast and reliable delivery. Security posture is strong with HTTPS enforcement, secure login mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, aligned with the Lufthansa Group's reputation.

S

Suva

suva.ch

75

Suva is a leading Swiss public institution specializing in accident prevention, insurance, and rehabilitation services. The organization serves a broad audience including employers and insured individuals across Switzerland, positioning itself as a key player in the national insurance and healthcare sector. The website reflects a mature digital presence with a clear focus on user experience and compliance with privacy regulations. Technically, the site leverages modern frameworks such as Angular, integrates reputable third-party services like Google Tag Manager and Cookiebot, and employs a Sitecore CMS backend, indicating a robust and scalable infrastructure. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and CSRF protections, although explicit security policies and incident response contacts are not publicly detailed. Overall, Suva's website demonstrates high professionalism, trustworthiness, and compliance, supporting its role as a major government-related insurance provider.

The Swiss Paraplegic Group is a well-established non-profit organization based in Switzerland, dedicated to supporting individuals with spinal cord injuries through a comprehensive network of services including rehabilitation, advocacy, and education. The website reflects a professional and trustworthy presence with clear communication of their mission and services. Technically, the site is built on modern frameworks such as Gatsby and React, leveraging reputable third-party services for analytics and consent management, ensuring a fast and accessible user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although a formal security policy and incident response information could enhance trust further. Privacy compliance is robust, with a detailed cookie policy and consent mechanism aligned with GDPR requirements. Overall, the site demonstrates high business credibility and technical maturity, suitable for its healthcare and non-profit sector audience.

T

Toyota Schweiz

toyota.ch

71

Toyota Schweiz operates as the official Swiss website for Toyota, providing comprehensive information about Toyota vehicles, especially hybrid models, targeting German-speaking customers in Switzerland. The site reflects a strong market position as part of the global Toyota brand, offering key services such as vehicle sales information, dealer location, and customer support. The technical infrastructure is modern and robust, leveraging Adobe Experience Manager as CMS, advanced analytics via Datadog and Google Tag Manager, and a compliant cookie consent mechanism through OneTrust. The website is well-optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. Security posture is strong with HTTPS enforcement, bot protection via hCaptcha, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and aligned with corporate standards, supporting Toyota's brand integrity in Switzerland.

F

Fondation Etoile filante

etoilefilante.ch

51

Fondation Etoile filante is a Swiss non-profit organization dedicated to improving the lives of children living with illness or disabilities by fulfilling their dreams and providing leisure and support projects. Established in 1993, it holds a strong market position as a recognized public utility foundation with tax-exempt status and annual audits by Swiss authorities. The website reflects a professional and trustworthy presence with clear donation mechanisms and active social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA implemented, though lacking some advanced security headers and explicit privacy documentation. Overall, the site is safe, well-branded, and credible, serving its target audience effectively.

E

EWS Wirtschaftsprüfung AG

ews.li

43

EWS Wirtschaftsprüfung AG is a small, independent auditing firm based in Liechtenstein, specializing in statutory and voluntary audits, financial statement reviews, and compliance with Liechtenstein and European auditing standards. The company serves businesses and organizations requiring professional auditing and financial consulting services, leveraging a team with strong professional credentials and partnerships in Switzerland. The website is built on WordPress with a custom theme, employing standard web technologies such as jQuery and CSS3. The site is accessible, mobile-optimized, and professionally designed, though it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enforced, but missing security headers and absence of a vulnerability disclosure policy indicate areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

W

WOLF-POWER GMBH

wolf-power.ch

54

Wolf-Power GmbH operates a professional automotive tuning e-commerce and service website based in Switzerland, offering a wide range of tuning software, hardware, and related services with over 50 years of experience. The company targets car enthusiasts and vehicle owners seeking performance enhancements and motorsport support. The website is built on the Shopware platform and integrates multiple modern marketing and analytics technologies, including Google Analytics, TikTok Pixel, Facebook Pixel, and Sendinblue marketing tools. Security posture is solid with HTTPS and reCAPTCHA v3, but lacks explicit privacy and cookie policies, which are compliance gaps. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the website is professional, well-structured, and trustworthy, but could improve privacy compliance and transparency.

Z

zurichnetgroup ag

netgroupcloud.ch

56

Zurichnetgroup ag is a Swiss ICT service provider specializing in cloud solutions tailored for small and medium-sized enterprises (KMU). The company leverages strong partnerships with Microsoft and Swisscom to offer a range of cloud services including private, public, hybrid clouds, and Microsoft 365 cloud solutions. Their market position is solidified by certifications such as ISO 9001, 14001, and 27001, and their focus on Swiss data protection standards appeals to privacy-conscious KMU clients. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and good SEO practices. The use of JSON-LD structured data and lazy loading images enhances performance and search engine visibility. Hosting is implied to be with Swisscom, aligning with their service offerings. From a security perspective, the site enforces HTTPS, employs multiple security headers, and benefits from the robust encryption standards of their cloud partners. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a trustworthy, professional image with strong compliance to privacy regulations and security best practices. The company is well-positioned in the Swiss KMU market with a comprehensive portfolio of cloud and IT services.

V

Verein Hilfe für Bangladesch

bangladesch.li

47

Verein Hilfe für Bangladesch is a small non-profit organization dedicated to supporting educational and social development projects in Bangladesh. Their website provides information about ongoing and archived projects, encouraging donations and sponsorships. The organization targets donors and supporters interested in charitable aid for Bangladesh. The site is primarily in German and uses WordPress with WooCommerce for donation processing. Technically, the website is built on a modern WordPress platform with common plugins such as WooCommerce, Contact Form 7, and Yoast SEO. It uses HTTPS and external CDNs for performance. The site is moderately optimized for mobile and SEO, with good navigation and content quality. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site enforces HTTPS and restricts ad and personalization tracking in Google Analytics, indicating some privacy awareness. However, it lacks important security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Overall, the website is legitimate and trustworthy for a small non-profit, with room for improvement in security posture and privacy compliance. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security policies, and maintaining up-to-date software to enhance trust and compliance.

W

Wasch- & Küchentechnik Urs Ruoss | Altendorf, March Höfe

wakutech.ch

45

Wasch- & Küchentechnik Urs Ruoss is a small, established retail business based in Switzerland specializing in household and kitchen appliances, including washing machines, kitchen technology, and coffee machines. The company operates a physical showroom in Altendorf SZ and offers repair services, home delivery, and disposal of old appliances. Their market position is that of a trusted local specialist with over 20 years of experience, supported by partnerships with well-known appliance brands and an online webshop. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, with Google reCAPTCHA implemented for form security. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and reCAPTCHA in place, but lacks advanced security headers and a formal security policy. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's local retail focus.

Joe Pfister is a small boutique wine producer and retailer based in Castelrotto, Tessin, Switzerland. The company offers exclusive wines primarily through an online shop, targeting adult wine consumers interested in high-quality boutique wines. The website reflects a focused e-commerce business model with event hosting and direct sales. Technically, the site is built on WordPress with WooCommerce, enhanced by plugins for SEO, cookie consent, age verification, and photo galleries. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent and age verification mechanisms, but lacks visible security headers and explicit privacy or security policies. The Google Analytics plugin is present but not configured, indicating limited user tracking. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

B

Beratung und Unterstützung Aktiengesellschaft

buag.li

46

BUAG is a specialized consulting firm based in Liechtenstein, focusing on financial regulatory compliance and support services for banks, securities firms, and financial intermediaries. The company offers services including regulatory analysis, implementation support, compliance control, and assistance with obtaining financial licenses. The website reflects a niche market position with a professional and consistent brand presence, targeting German-speaking financial institutions. Technically, the site is built on WordPress with common plugins and uses HTTPS and Google Analytics for tracking. While the site is mobile-optimized and SEO-friendly, it lacks some security headers and explicit cookie consent mechanisms, indicating room for improvement in privacy compliance. Security posture is moderate with secure forms and no visible vulnerabilities, but incident response and security policies are not publicly disclosed. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Skiclub Graue Hörner

grauehoerner.ch

49

Skiclub Graue Hörner is a well-established non-profit ski club based in Mels, Switzerland, founded in 1935. The club offers a variety of skiing-related activities including youth racing groups, ski touring, ski gymnastics, and social events for members. The website serves as an information hub for members and prospective members, providing event schedules, membership applications, and news updates. The club maintains a local presence with sponsorships and active social media channels on Facebook and Instagram. Technically, the website is built on WordPress with a modern plugin stack including Events Manager and Beaver Builder, providing a functional and moderately optimized user experience. Security posture is adequate with HTTPS enforced and spam protection via honeypot, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, suitable for its community-focused purpose.

A

AC Alpina Consult GmbH

ac-alpina.ch

49

AC Alpina Consult GmbH is a small Swiss consulting firm specializing in fiduciary and financial advisory services tailored to SMEs and private clients. The company emphasizes a personalized, trust-based coaching approach, positioning itself as a generalist guiding clients through complex financial and entrepreneurial challenges. The website reflects this with professional content, clear contact information, and trust signals such as membership in Treuhand Suisse. Technically, the site is built on WordPress with modern frontend libraries like jQuery and Slick Slider, and it is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though it lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reliable small consulting firm.

P

Pensionskasse der Bank J. Safra Sarasin

pkbjss.ch

46

The website www.pkbjss.ch represents the pension fund of Bank J. Safra Sarasin, providing information primarily to its members. The site is multilingual (German, English, French) and offers a secure member login portal hosted externally. The business is a niche financial entity focused on pension fund management for bank employees in Switzerland. The website content is basic but consistent with the business purpose, with limited direct contact information and no visible advanced security or privacy features beyond HTTPS. Technically, the site is built on WordPress with common libraries such as jQuery and Owl Carousel. It is moderately optimized for mobile and SEO but lacks advanced accessibility and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of marketing or user behavior insights. Security posture is adequate with HTTPS enforced and external secure login, but the absence of security headers and cookie consent mechanisms are notable gaps. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

Schaffer-office is a small Swiss-based service provider specializing in accounting, tax declarations, real estate sales and rentals, administrative support, and payroll services primarily targeting small and medium enterprises (KMU) and private customers in the Wollerau region. The website presents a professional business offering with clear service descriptions and a focus on local clientele including EU citizens relocating to Switzerland. The business appears to be established since 2015, consistent with domain registration data. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with a moderate performance and good mobile optimization. However, some technical debt is evident from outdated jQuery usage and visible PHP warnings, which could pose security risks. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, HTTPS is enforced, but there is a lack of security headers and visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. The site does not employ tracking or advertising scripts, which reduces privacy concerns but also limits marketing insights. Overall, the website is functional and professional but would benefit from improved security practices, updated technical components, and enhanced privacy compliance to strengthen trust and reduce risk.

S

Error

suddl.ch

50

The domain suddl.ch currently hosts a Wix error page indicating that the domain is not connected to an active website. There is no business information, contact details, or privacy policies present, which suggests the domain is either unused or under development. The website is built on the Wix platform using AngularJS and jQuery libraries, but no custom content or services are offered. The technical infrastructure is basic and lacks modern SEO and accessibility features. Security posture is minimal with no detected security headers or policies, and the domain registration is privacy protected, limiting transparency. Overall, the site presents a low trust profile and minimal business presence.

The website mauris-lacasa.ch is currently non-functional, displaying a critical WordPress error page with no accessible business content or user interface. This indicates a significant technical failure preventing normal operation and user engagement. The lack of privacy, cookie, or terms of service policies further suggests the site is not currently maintained or compliant with standard regulations. Technically, the site uses WordPress CMS but lacks visible security headers, performance optimizations, or SEO best practices. The absence of HTTPS confirmation and security policies raises concerns about the security posture. Overall, the site presents a high risk due to its inaccessibility and lack of compliance, requiring urgent remediation to restore functionality and trust.

K

KAFILAND

kafiland.ch

61

KAFILAND is a small local retail business specializing in coffee machines located in Altendorf SZ, Switzerland. The website is built on the Wix platform and uses Wix's Thunderbolt framework and standard JavaScript polyfills. The business targets local consumers and businesses seeking coffee machines. The website provides basic business information including phone number and physical address but lacks email contact and online forms. The technical infrastructure is modern for a small business, with HTTPS enabled and moderate performance. However, privacy and cookie policies are missing, which is a compliance gap. Security posture is adequate with HTTPS and some script-based security hardening but lacks explicit security headers and incident response information. Overall, the website is functional and trustworthy but could improve privacy compliance and contact options.

The website sofdi.com is currently inaccessible beyond a standard 503 Service Temporarily Unavailable error page, indicating maintenance downtime or capacity issues. Due to this, no business content, metadata, or user-facing information is available for analysis. The domain is registered with 1API GmbH since 2009, showing a mature domain age and active registration until 2026, which supports legitimacy. However, the lack of registrant details and absence of website content limits the ability to assess the company's business model, services, or market position. Technically, the site lacks DNSSEC and security headers, and no HTTPS enforcement details are available from the provided data. No privacy or cookie policies, contact information, or security disclosures are present, indicating poor compliance and transparency at this time.

C

Cava Hispania

cavahispania.ch

50

Cava Hispania is a small retail business based in Basel, Switzerland, specializing in the import and sale of Spanish wines. With over 25 years of experience, the company has established itself as a trusted local wine importer and retailer. The website is professionally designed, targeting mature wine consumers in the Basel region, and offers clear contact information and social media engagement. The business model focuses on direct import from producers and retail sales, including gastronomy supply. Technically, the website uses modern frontend technologies such as React and Webpack, with Craft CMS as the backend platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. No blocking or WAF mechanisms interfere with access, and no suspicious content or vulnerabilities were detected. Overall, the website demonstrates a solid digital presence with room for improvement in privacy compliance and security best practices.

The website stefan-aufdermaur.ch serves as a personal or professional portfolio site for Stefan Auf der Maur, likely showcasing artistic or photographic work. The site is minimalistic with limited metadata and no structured data, focusing primarily on visual content. The target audience appears to be general visitors interested in the individual's work, with no commercial or transactional features evident. Technically, the site uses basic HTML, CSS, and JavaScript with lazy loading for images, but lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak, with no visible security headers or privacy policies, and no HTTPS status confirmed from the provided data. No contact information or forms are present, limiting user engagement and trust signals. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and user experience.

Genossenschaft Haus Oslo Ateliers is a small cooperative likely focused on providing atelier spaces or community services for artists and creatives in Switzerland. The website is primarily informational, presented in German, and built on the CraftCMS platform. The technical infrastructure is moderate with HTTPS enabled and hosted on an Apache server, but lacks advanced security headers and privacy compliance features. No contact or policy information is provided, which limits user trust and compliance with regulations such as GDPR. The site does not employ analytics or advertising technologies, indicating a minimal digital footprint. Overall, the website serves its niche audience but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.

Julian Salinas Fotografie is a small photography business based in Switzerland, focusing on artistic and commissioned photography services primarily in Basel and Zurich. The website presents basic information about the business and its offerings, including art works, commissioned projects, exhibitions, portraits, and video projects. The target audience is general, including art enthusiasts and potential clients seeking photography services. Technically, the website is built using React and standard web technologies such as JavaScript and CSS. The site appears moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There are no detected content management systems or third-party analytics or advertising tools integrated. From a security perspective, the website lacks visible security headers and privacy or cookie policies, indicating a low maturity level in security and compliance. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also limiting user engagement. The absence of HTTPS information prevents a full SSL configuration assessment. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a basic but functional online presence for a small photography business. Key recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.